🇺🇸
TPI-Abuse
2026-09-01 06:42:24
(2 hours ago)
(mod_security) mod_security (id:225170) triggered by 103.174.50.208 (s8bd.whiteservers.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 103.174.50.208 (s8bd.whiteservers.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:42:16.342139 2026] [security2:error] [pid 32101:tid 32101] [client 103.174.50.208:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ac.cloudex.click|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ac.cloudex.click"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apZzyMvJ3as3axPknw5KwgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
BRHosting
2026-09-01 02:55:29
(5 hours ago)
Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)
Brute-Force
Web App Attack
🇩🇪
ger-stg-sifi1
2026-09-01 02:30:09
(6 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 02:19:09
(6 hours ago)
(mod_security) mod_security (id:225170) triggered by 103.174.50.208 (s8bd.whiteservers.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 103.174.50.208 (s8bd.whiteservers.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 22:19:01.858555 2026] [security2:error] [pid 11267:tid 11267] [client 103.174.50.208:42510] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fundaciondamashcc.org.ec|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fundaciondamashcc.org.ec"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apY2FUHkXPUSAlGlbQhKBwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
wpadm4
2026-09-01 01:10:17
(7 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇬🇧
andypiper
2026-09-01 01:01:00
(7 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇦🇺
FireGuard Server
2026-09-01 00:50:05
(7 hours ago)
Blocked by os-abuseipdb; 6 hits, proto=tcp, ports=443
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-09-01 00:45:30
(7 hours ago)
(mod_security) mod_security (id:225170) triggered by 103.174.50.208 (s8bd.whiteservers.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 103.174.50.208 (s8bd.whiteservers.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:45:25.494203 2026] [security2:error] [pid 3601442:tid 3601557] [client 103.174.50.208:53264] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sloveniaflyfishing.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sloveniaflyfishing.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apYgJc66o2Lo9jM_TTLQXQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Mehmet_The_Script_Kiddie
2026-09-01 00:31:52
(8 hours ago)
CloudFlare WAF REPORT: /wp-login.php
Bad Web Bot
Web App Attack
🇬🇧
spamverify.com
2026-09-01 00:14:55
(8 hours ago)
Honeypot Hit: WordPress Login
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 00:10:39
(8 hours ago)
(mod_security) mod_security (id:225170) triggered by 103.174.50.208 (s8bd.whiteservers.net): 1 in th ...
show more
(mod_security) mod_security (id:225170) triggered by 103.174.50.208 (s8bd.whiteservers.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:10:30.624960 2026] [security2:error] [pid 19449:tid 19449] [client 103.174.50.208:52378] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.tasteshop.l3l4.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.tasteshop.l3l4.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apYX9sXfy7a4NbjTpgf25QAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-31 22:40:04
(10 hours ago)
Bot / scanning and/or hacking attempts: POST /wp-login.php HTTP/2.0
Hacking
Web App Attack
🇩🇪
nyt
2026-08-31 22:06:53
(10 hours ago)
Repeated WordPress login POSTs blocked by WAF (3 in 6h)
Brute-Force
Web App Attack
🇫🇷
tecnicorioja
2026-08-31 22:00:15
(10 hours ago)
wp-login attack [31/Aug/2026:08:37:21
Brute-Force
Web App Attack
🇩🇪
LRob
2026-08-31 21:54:19
(10 hours ago)
WordPress login brute-force | path: /wp-login.php | 2026-08-31 21:54 UTC
Brute-Force
Web App Attack